35 matches found
Discourse: CSRF-tokens on pages without no-cache headers, resulting in ATO when using CloudFlare proxy (Web Cache Deception)
Hi, I noticed this issue on one of your clients which was using CloudFlare in front of their Discourse. This is not affecting try.discourse.org but the same underlying issue can be seen there as well even though it's not exploitable on that specific domain. The TL;DR of issue is basically:...
Storage API - Moderately Critical - Access Bypass - SA-CONTRIB-2015-114
The Storage API module creates an underlying agnostic storage layer for Drupal using many different underlying storage methods. Storage API can be used to create fields for entities to hold data. The module failed to restrict access to the Storage API fields attached to entities that are not node...
wmp-dos.txt
/ Windows Media Player AIFF Divide By Zero Exception DOS POC by Hong Gil-Dong, Jeon Woo-chi Jeong Ji-Sang ?¡1135, He was one of the most famous korean poet. This poem says sadness about good-bye'. áêìÑ éëúÎíþð§õ®ßäÒý áêÏÖÑõøÝÔÑÝèÊ° ÓÞÔÒË°â©ù¼ãÁò× Ü¬×¨Ò´Ò´ôÕÖà÷î If you open the kr.aiff in Window...
Windows Media Player AIFF Divide By Zero Exception DoS PoC
No description provided by source. / Windows Media Player AIFF Divide By Zero Exception DOS POC by Hong Gil-Dong, Jeon Woo-chi Jeong Ji-Sang ?1135, He was one of the most famous korean poet. This poem says sadness about good-bye'. áêì éúí§ áêè° °ù¼ò× ×¨à÷...
Microsoft Windows Media Player - '.AIFF' Divide By Zero Exception Denial of Service (PoC)
/ Windows Media Player AIFF Divide By Zero Exception DOS POC by Hong Gil-Dong, Jeon Woo-chi Jeong Ji-Sang ?∼1135, He was one of the most famous korean poet. This poem says sadness about good-bye'. é€äºº 雨æ‡é•·å ¤è‰è‰²å¤š é€å›å—æµ¦å‹•æ‚²æŒ å¤§åŒæ±Ÿæ°´ä½•æ™‚盡 åˆ¥æ·šå¹´å¹´æ·»ç¶ æ³¢ ...
Microsoft Internet Explorer TIF/TIFF Code Execution (MS07-055)
No description provided by source. !/usr/bin/perl Microsoft Internet Explorer TIF/TIFF Code Execution MS07-055 Author: grabarz grabarz at grabarz.info Note: This exploit is modified from Hong Gil-Dong, Jeon Woo-chi PoC http://www.milw0rm.com/exploits/4584...
Microsoft Internet Explorer - TIFTIFF Code Execution (MS07-055)
Microsoft Internet Explorer - TIFTIFF Code Execution MS07-055 !/usr/bin/perl Microsoft Internet Explorer TIF/TIFF Code Execution MS07-055 Author: grabarz Note: This exploit is modified from Hong Gil-Dong, Jeon Woo-chi PoC http://www.milw0rm.com/exploits/4584 Internet Explorer has standart ImageBa...
Kodak Image Viewer TIF/TIFF Code Execution Exploit PoC (MS07-055)
No description provided by source. / MS07-055 Kodak Image Viewer TIF/TIFF Code Execution Proof Of Concept by Hong Gil-Dong, Jeon Woo-chi Hwang-Hee?1542, Prime Minister in Korea Once upon a time, One servant of Hwang-Hee was arguing with another servant. they asked Hwang-Hee to judge who is right...
Kodak Image Viewer - TIFTIFF Code Execution (MS07-055)
Kodak Image Viewer - TIFTIFF Code Execution MS07-055 / MS07-055 Kodak Image Viewer TIF/TIFF Code Execution Proof Of Concept by Hong Gil-Dong, Jeon Woo-chi Hwang-Hee?1542, Prime Minister in Korea Once upon a time, One servant of Hwang-Hee was arguing with another servant. they asked Hwang-Hee to...
kodak-exec.txt
/ MS07-055 Kodak Image Viewer TIF/TIFF Code Execution Proof Of Concept by Hong Gil-Dong, Jeon Woo-chi Hwang-Hee?1542, Prime Minister in Korea Once upon a time, One servant of Hwang-Hee was arguing with another servant. they asked Hwang-Hee to judge who is right. Hwang-Hee listend their story, and...
Kodak Image Viewer TIF/TIFF Code Execution Exploit PoC (MS07-055)
Exploit for unknown platform in category local exploits ================================================================= Kodak Image Viewer TIF/TIFF Code Execution Exploit PoC MS07-055 ================================================================= / MS07-055 Kodak Image Viewer TIF/TIFF Code...
Kodak Image Viewer - TIF/TIFF Code Execution (MS07-055)
/ MS07-055 Kodak Image Viewer TIF/TIFF Code Execution Proof Of Concept by Hong Gil-Dong, Jeon Woo-chi Hwang-Hee?1542, Prime Minister in Korea Once upon a time, One servant of Hwang-Hee was arguing with another servant. they asked Hwang-Hee to judge who is right. Hwang-Hee listend their story, and...
MS Windows (GDI32.DLL) Denial of Service Exploit (MS07-046)
No description provided by source. / MS07-046GDI32.dll Integer overflow DOS Proof Of Concept Code by Hong Gil-Dong & Chun Woo-Chi Yang yeon?1542, Korea "I shall keep clenching my left fist unitl i see the real tao". This POC is only for test. If an application read a malformed wmf file like this...
Microsoft Windows - 'gdi32.dll' Denial of Service (MS07-046)
/ MS07-046GDI32.dll Integer overflow DOS Proof Of Concept Code by Hong Gil-Dong & Chun Woo-Chi Yang yeon?1542, Korea "I shall keep clenching my left fist unitl i see the real tao". This POC is only for test. If an application read a malformed wmf file like this POC, the application will be crashe...
MS Windows (GDI32.DLL) Denial of Service Exploit (MS07-046)
Exploit for unknown platform in category dos / poc =========================================================== MS Windows GDI32.DLL Denial of Service Exploit MS07-046 =========================================================== / MS07-046GDI32.dll Integer overflow DOS Proof Of Concept Code by Hong...